This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json) Hash identifier: 85iTpDz30djGsK//lrRtNmIR6PUZ8N5q/TgJ39HRTDE= Subject key identifier: 76:2D:3D:AD:B1:26:61:26:83:81:1E:72:3D:56:4A:69:A7:6E:D3:32 Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Certificate serial: 019AF12D282824A73298599852F6CFE2F8E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft Manifest number: 128F Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=) 2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=) 3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: 7iL1yPlf4+clrFEmNmcKJ9XaPVaHfIvJb5Pe3eDUdaM=) 4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:28:28:24:a7:32:98:59:98:52:f6:cf:e2:f8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=762d3dadb126612683811e723d564a69a76ed332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ca:b7:e0:76:17:25:6d:90:e9:51:0c:df:10: 46:d0:bd:38:fa:29:d6:0e:1e:04:db:46:01:54:52: 1f:1e:3c:bc:73:2a:37:2a:e4:c8:d2:da:ee:cb:0b: b0:40:24:32:1b:07:90:7d:32:1f:7f:6a:e3:23:ed: 84:ed:24:5d:a5:eb:1f:48:9e:96:86:b6:b1:17:4e: 88:5e:fd:aa:22:53:70:f1:49:d8:0f:92:bf:fb:02: b2:c1:fc:ee:1f:01:6f:c1:b0:ae:6c:b2:b5:cb:46: af:a9:4f:1d:e0:89:7c:1a:7f:c4:7b:9c:ae:ad:60: d5:c5:7d:15:fc:cd:8a:97:a0:e3:07:c4:f3:63:5d: d2:ee:51:a4:63:91:95:de:d0:ad:ec:bb:4e:f4:ae: 6e:b9:77:7d:53:e8:a8:58:09:3f:8c:6b:ac:e6:1a: 4d:e2:c5:d6:02:d0:ef:8d:80:e7:b2:3b:82:e7:54: dd:35:56:23:7b:e1:84:d2:79:d2:15:6c:c1:10:14: c4:b8:9c:64:4b:a2:91:8a:aa:ed:e6:65:cf:43:36: eb:cc:7d:90:d5:f8:10:e5:22:00:94:08:4a:1f:b0: e0:7e:cd:be:ed:9c:8e:22:4f:38:d1:ea:f6:45:a4: 72:a2:14:af:f6:71:66:73:6c:86:63:00:f7:b4:63: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2D:3D:AD:B1:26:61:26:83:81:1E:72:3D:56:4A:69:A7:6E:D3:32 X509v3 Authority Key Identifier: keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1f:85:52:21:6c:15:53:a3:13:7f:2d:74:2a:f7:1e:ef:c1: 1d:58:6d:39:8e:6a:26:fa:e9:da:9a:d7:f4:71:51:c9:dc:e0: d0:dd:7e:ae:19:24:d5:f6:6f:02:a5:a2:86:ea:c6:c6:ba:a9: 7e:9c:9d:29:ac:24:91:39:a2:57:5e:40:a3:f2:13:0a:32:fb: 82:bf:cd:ec:b0:56:5b:81:31:0a:9a:2d:7e:0e:3a:07:fc:a9: 7d:da:85:67:d1:a9:e4:27:e6:13:1e:46:41:10:3e:ec:08:79: 3f:ec:aa:e3:85:df:bd:74:12:02:bf:37:d9:4f:7f:8a:e6:54: ed:ac:12:92:11:a1:27:83:fb:3a:df:1f:da:9b:f6:e1:35:87: 6d:58:ff:d0:5c:1b:e8:a4:4f:16:ab:83:bf:ec:e3:c8:04:b0: 61:91:a9:59:ca:eb:16:ce:13:36:05:9f:43:ba:7c:67:1d:eb: be:c3:18:82:f0:22:a4:cc:4a:9c:15:2a:4b:6b:be:a8:cc:5b: ed:d0:0c:50:a1:a8:85:25:bd:b2:c7:28:24:3f:f9:60:59:89: aa:01:2d:d0:55:de:b5:f4:d5:d7:87:72:df:7e:2a:da:f9:61: 8f:06:3f:9c:d6:77:56:47:e2:9f:e7:93:d5:1f:a2:05:88:c0: 74:d0:bd:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSgoJKcymFmYUvbP4vjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh N2U5ZDQwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD Eyg3NjJkM2RhZGIxMjY2MTI2ODM4MTFlNzIzZDU2NGE2OWE3NmVkMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sq34HYXJW2Q6VEM3xBG0L04+inW Dh4E20YBVFIfHjy8cyo3KuTI0truywuwQCQyGweQfTIff2rjI+2E7SRdpesfSJ6W hraxF06IXv2qIlNw8UnYD5K/+wKywfzuHwFvwbCubLK1y0avqU8d4Il8Gn/Ee5yu rWDVxX0V/M2Kl6DjB8TzY13S7lGkY5GV3tCt7LtO9K5uuXd9U+ioWAk/jGus5hpN 4sXWAtDvjYDnsjuC51TdNVYje+GE0nnSFWzBEBTEuJxkS6KRiqrt5mXPQzbrzH2Q 1fgQ5SIAlAhKH7Dgfs2+7ZyOIk840er2RaRyohSv9nFmc2yGYwD3tGNoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYtPa2xJmEmg4Eecj1WSmmnbtMyMB8GA1UdIwQY MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt ZjdkMDI3NTYwMDU4LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4 LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh+FUiFs FVOjE38tdCr3Hu/BHVhtOY5qJvrp2prX9HFRydzg0N1+rhkk1fZvAqWihurGxrqp fpydKawkkTmiV15Ao/ITCjL7gr/N7LBWW4ExCpotfg46B/ypfdqFZ9Gp5CfmEx5G QRA+7Ah5P+yq44XfvXQSAr832U9/iuZU7awSkhGhJ4P7Ot8f2pv24TWHbVj/0Fwb 6KRPFquDv+zjyASwYZGpWcrrFs4TNgWfQ7p8Zx3rvsMYgvAipMxKnBUqS2u+qMxb 7dAMUKGohSW9sscoJD/5YFmJqgEt0FXetfTV14dy334q2vlhjwY/nNZ3Vkfin+eT 1R+iBYjAdNC97Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:34 2025 by rpki-client